CVE-2024-23285

2024-03-0802:15:49

[email protected]

web.nvd.nist.gov

cve

2024

23285

improved handling

symlinks

macos

sonoma 14.4

nvd

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.4%

JSON

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.4. An app may be able to create symlinks to protected regions of the disk.

VendorProductVersionCPE
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	macos	*	cpe:2.3:o:apple:macos::::::::

References

seclists.org/fulldisclosure/2024/Mar/21

support.apple.com/en-us/HT214084